What's Changed
- fix(server): add 30s connection timeout to prevent slow-client thread exhaustion by @iRonin in #198
- fix(auth): prune expired sessions on every verify to prevent memory leak by @iRonin in #196
- fix(security): add Content-Security-Policy and Permissions-Policy headers by @iRonin in #197
- feat: optional HTTPS/TLS support via cert and key env vars by @iRonin in #199
- fix: use current branch upstream for update checks instead of default branch by @iRonin in #201
- fix: support CLI sessions in /api/list file browser by @iRonin in #204
- docs: v0.41.0 release — 5 security/fix PRs merged by @nesquena-hermes in #205
New Contributors
Full Changelog: v0.40.2...v0.41.0